Issue automating bitlocker deployment via kace script & manage-bde
We are in the works to make sure all our devices are bitlocked and encrypted. This has always been a manual process when re-imaging, but we have a good number of devices that need to be bitlocked in remote locations. When we do it manually we save the bitlock key in a text file in a network folder. I would like to script this process and make it auto-save the key file to the same network drive. I have a script that works well as a .bat file but is giving me an error I can pinpoint as to the cause. Anyone have any ideas?
Here is the error:
Running as credntials provided Creating process returned non-zero: %systemdrive%\Windows\System32\manage-bde.exe -status C: -protectionaserrorlevel: (4294967295) Error Code: -1 Status Code: 0 Creating process returned non-zero: %systemdrive%\Windows\System32\manage-bde.exe -protectors -add %SystemDrive% -tpm: (4294967295) Error Code: -1 Status Code: 0
Here is the script:
4 Comments
[ + ] Show comments
Answers (2)
Please log in to answer
Posted by:
chucksteel
5 years ago
The manage-bde.exe command is not available in the 32bit context where the AMPAgent is running. You need to use %windir%\sysnative\manage-bde.exe instead.
Posted by:
Timokirch
5 years ago
https://www.itninja.com/blog/view/kace-sma-bitlocker as an alternative
https://www.itninja.com/question/need-help-with-formerly-functioning-script - Loei 5 years ago